$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/104ae49f-72a5-3b15-a1e5-0679593c9d0e.roa File: 104ae49f-72a5-3b15-a1e5-0679593c9d0e.roa (raw, json) Hash identifier: A1FhW8DdI/qabdI7y10/cvTU74EnGgIhE9EdozJGzs0= Subject key identifier: 0F:A8:F0:96:A5:53:3A:C8:AA:9F:0B:3C:83:BA:65:11:25:6F:51:13 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584D316F7D414032FE140C432B40 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/104ae49f-72a5-3b15-a1e5-0679593c9d0e.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 17275 IP address blocks: 161.107.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:7d:41:40:32:fe:14:0c:43:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=4f4a5391-d65d-446d-9580-be1461096835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:ed:45:7f:e2:66:6b:28:4b:dc:a5:ee:aa: 8c:d2:be:fc:f1:92:00:40:42:19:2c:32:9b:60:49: 09:86:ff:8d:b5:3e:1d:c9:8a:c6:ad:33:60:fd:8f: bf:91:96:fe:db:ee:5a:48:a8:49:88:91:27:ce:4c: 16:27:53:87:78:3b:dc:7d:ff:f0:61:4d:17:a2:9e: 25:e6:57:4e:0c:03:d7:fb:46:ff:6e:59:fe:3c:15: fc:ab:18:a5:97:ae:81:6b:d5:54:e9:a5:4c:1a:7c: e2:08:6b:3f:36:00:e5:95:0e:e5:2b:e6:45:90:cc: 5c:c8:fa:8f:a4:94:9b:2e:90:ce:22:8c:5f:0e:01: 54:b3:04:34:b7:bf:be:ed:88:fd:f4:f5:9d:f8:33: 49:d5:68:b1:0d:2b:40:a4:2f:c5:14:23:1f:2d:b7: 40:d9:9d:f7:2c:a3:37:52:a7:dd:90:66:32:8f:e9: b9:b0:77:82:01:9c:c1:fa:ee:3a:16:b3:09:c9:6c: f6:2c:57:f4:a8:f2:5c:57:ba:ed:22:55:5e:aa:b9: 1a:9f:73:1c:d1:38:bd:98:78:19:80:63:de:63:54: 5e:94:ea:b3:7a:a9:b5:94:eb:8c:8d:9f:83:5e:8e: 7b:ca:93:3e:02:db:9b:5b:36:62:76:e9:eb:c9:ab: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A8:F0:96:A5:53:3A:C8:AA:9F:0B:3C:83:BA:65:11:25:6F:51:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/104ae49f-72a5-3b15-a1e5-0679593c9d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:88:86:8d:44:86:32:86:c3:23:91:54:28:65:04:bd:7e:4a: b8:7b:86:3d:33:48:94:af:95:97:ab:45:96:38:e9:0d:b0:1e: 54:24:73:7f:f5:5d:fd:1b:75:83:0a:27:85:6e:2e:0a:a1:7d: ba:87:42:69:ad:a5:6d:90:24:6c:a6:fd:ec:6a:13:ee:6d:8b: b2:aa:9f:69:29:e0:9c:a6:90:19:3b:53:b2:7b:95:7a:00:55: 9c:95:55:98:97:5d:e1:73:35:4b:0d:81:b3:cb:4c:66:f3:c8: a0:d9:5a:7a:7e:c0:08:6b:f7:ca:ca:74:7c:c8:33:1e:5c:45: 23:63:1f:cc:27:ab:d6:14:4c:54:c9:9f:73:bf:97:d2:a4:e2: e0:57:19:d7:63:44:e7:78:49:f3:1a:cc:7f:fc:11:87:79:06: 21:ba:7b:51:f6:77:f1:1c:99:eb:5f:cb:de:3a:ec:d7:c9:ec: 36:91:6c:57:75:cb:cd:5a:dc:7b:34:c9:fb:06:66:38:cc:66: f8:11:9d:c9:cc:2f:a5:f4:58:92:b0:8c:95:84:18:8f:88:48: 8e:f3:b2:dc:72:0f:0a:98:32:ec:6f:c8:3c:f1:3e:cb:6c:83: ae:02:07:df:46:aa:a9:7c:e8:5b:81:eb:0a:95:9e:98:1d:9d: 05:28:cd:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb31BQDL+FAxDK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk NGY0YTUzOTEtZDY1ZC00NDZkLTk1ODAtYmUxNDYxMDk2ODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysHtRX/iZmsoS9yl7qqM0r788ZIAQEIZLDKb YEkJhv+NtT4dyYrGrTNg/Y+/kZb+2+5aSKhJiJEnzkwWJ1OHeDvcff/wYU0Xop4l 5ldODAPX+0b/bln+PBX8qxill66Ba9VU6aVMGnziCGs/NgDllQ7lK+ZFkMxcyPqP pJSbLpDOIoxfDgFUswQ0t7++7Yj99PWd+DNJ1WixDStApC/FFCMfLbdA2Z33LKM3 UqfdkGYyj+m5sHeCAZzB+u46FrMJyWz2LFf0qPJcV7rtIlVeqrkan3Mc0Ti9mHgZ gGPeY1RelOqzeqm1lOuMjZ+DXo57ypM+AtubWzZidunryasFIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+o8JalUzrIqp8LPIO6ZRElb1ETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMTA0YWU0OWYtNzJhNS0z YjE1LWExZTUtMDY3OTU5M2M5ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+Iho1EhjKGwyORVChlBL1+Srh7hj0zSJSvlZerRZY46Q2wHlQkc3/1 Xf0bdYMKJ4VuLgqhfbqHQmmtpW2QJGym/exqE+5ti7Kqn2kp4JymkBk7U7J7lXoA VZyVVZiXXeFzNUsNgbPLTGbzyKDZWnp+wAhr98rKdHzIMx5cRSNjH8wnq9YUTFTJ n3O/l9Kk4uBXGddjROd4SfMazH/8EYd5BiG6e1H2d/Ecmetfy9467NfJ7DaRbFd1 y81a3Hs0yfsGZjjMZvgRncnML6X0WJKwjJWEGI+ISI7zstxyDwqYMuxvyDzxPsts g64CB99Gqql86FuB6wqVnpgdnQUozT8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:03:03 2026 by rpki-client